An evolving how-to guide for securing a Linux server.
Updated Apr 12, 2019
#
hardening
Repositories 162
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
linux
linux-hardening
linux-security
security
hardening
audit
guide
manual
checklist
cis
pci-dss
openscap
redhat-enterprise-linux
centos
Updated Apr 12, 2019
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27…
shell
linux
pci-dss
compliance
security-audit
security-hardening
security-scanner
security-vulnerability
hipaa
unix
vulnerability-detection
vulnerability-scanners
vulnerability-assessment
devops
devops-tools
system-hardening
hardening
auditing
gdpr
security-tools
Good first issues
Gather info on expired passwords and locked accounts
good first issue help wanted#474 opened over 1 year ago by sigio
3
Shell
Updated Apr 29, 2019
AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of th…
security
security-tools
security-audit
security-hardening
cloudtrail
hardening
aws-cli
aws
cis-benchmark
prowler
assessment
aws-auditing
compliance
gdpr
hipaa
cis
forensics
cloud
well-architected
Good first issues
Shell
Updated Apr 30, 2019
Hardentools is a utility that disables a number of risky Windows features.
Go
Updated Apr 21, 2019
This Ansible role provides numerous security-related configurations, providing all-round base protection.
Ruby
Updated May 4, 2019
Python
Updated Apr 2, 2018
A curated list of awesome Security Hardening techniques for Windows.
Updated Nov 11, 2018
Security compliance content in SCAP, Bash, Ansible, and other formats
security
compliance
scap
xccdf
oval
cpe
cce
usgcb
pci-dss
ospp
stig
application-security
security-tools
security-hardening
security-automation
security-profile
hardening
information-security
cybersecurity
ansible
Good first issues
Developer Guide doesn't fully reflect the latest structural changes
documentation Text#3246 opened 8 months ago by jan-cerny
1
Python
Updated May 3, 2019
AWS Auditing & Hardening Tool
Shell
Updated Jun 7, 2018
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
Ruby
Updated May 4, 2019
Easily configure macOS security settings from the terminal.
Good first issues
Update for macOS Mojave
good first issue Hacktoberfest#56 opened 6 months ago by alichtman
Python
Updated Jan 29, 2019
SUHOSIN - 수호신 - The PHP security extension.
C
Updated Jul 8, 2017
Hardening Ubuntu. Systemd edition.
Shell
Updated May 3, 2019
This chef cookbook provides numerous security-related configurations, providing all-round base protection.
Ruby
Updated Apr 10, 2019
DevSec Linux Baseline - InSpec Profile
Ruby
Updated Apr 1, 2019
Security module for php7 - Killing bugclasses and virtual-patching the rest!
Good first issues
[Debian] PHP config file installation
good first issue build system#291 opened about 1 month ago by Yoda-BZH
1
new setcookie() signature from PHP 7.3 not supported
good first issue portability#287 opened 2 months ago by KiNgMaR
3
Blacklist well-known pop-chain gadgets
good first issue configuration#249 opened 8 months ago by jvoisin
C
Updated Apr 7, 2019
h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
Python
Updated Apr 16, 2019
HardenedBSD development tree.
This puppet module provides numerous security-related configurations, providing all-round base protection.
Puppet
Updated May 1, 2019
CIS Docker Benchmark - InSpec Profile
Ruby
Updated Oct 23, 2018
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer
linux
cis-benchmark
linux-server
hardening
ubuntu-server
centos7
lamp-stack
hardening-steps
iptables
ubuntu1604
ubuntu1804
security-hardening
system-hardening
PHP
Updated Mar 11, 2019
Reproducible curl/libcurl (and OpenSSL) binaries for Windows
Shell
Updated May 4, 2019
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externa…
malloc
security
memory-allocation
malloc-library
memory-allocator
memory
hardening
slab-allocator
quarantine
grapheneos
C
Updated Apr 30, 2019
Blue Team Scripts
Shell
Updated Mar 28, 2019
This chef cookbook provides secure ssh-client and ssh-server configurations.
Ruby
Updated Mar 20, 2019
This Ansible role provides secure nginx configurations.
Ruby
Updated Apr 30, 2019
DevSec SSH Baseline - InSpec Profile
Ruby
Updated Apr 6, 2019
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services F…
terraform
aws
security
security-hardening
terraform-modules
hardening
cis-benchmark
aws-auditing
security-tools
devops
HCL
Updated May 2, 2019
This Ansible role provides security configuration for MySQL.
Ruby
Updated Apr 30, 2019